"The list of AWS policy types and identities that are used to calculate the net effective permissions are as follows:
AWS IAM role
AWS IAM policy
AWS IAM group
AWS service control policies (SCPs)
Role trust relationships
Permission boundaries
NotAction
Policies with wild card support
If your cloud environment has additional resource types, Prisma Cloud does not factor them into the net-effective permissions.
In addition, permissions can also be set by a resource-based policy. The following AWS resource-based policies are supported in the net effective permissions calculation:
Lambda function
S3 bucket
SQS queue
SNS topic
ECS task definition
Secret manager
KMS key
Lambda layer version"

Onboarding an account for Data Security involves several critical steps to ensure comprehensive coverage and effective monitoring. The steps involved include B. Create a Cloudtrail with SNS Topic to track and manage API calls and relevant notifications, D. Enter the RoleARN and SNSARN to provide necessary access and integration points for data security functions, and E. Create a S3 bucket which serves as a storage solution for logging and data capture essential for security analysis.

https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/vulnerability_managemen The top critical CVEs (Common Vulnerabilities and Exposures) for deployed images in Prisma Cloud can be found in the Vulnerabilities Explorer under the Monitor tab. This is where users can input the CVE of interest and get a filtered list of images impacted by that CVE. The Vulnerability Explorer provides a comprehensive view of the vulnerabilities, allowing users to see details such as risk score, CVE risk factors, environmental risk factors, and impacted packages1. This tool is essential for identifying and managing vulnerabilities within your cloud environment, ensuring that all images pulled into deployments or test environments are properly identified and secured.
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000004MfoCAE

https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/manage-prisma-cloud-alerts/prisma